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1 Introduction 

Termination provers for term rewrite systems (TRSs) became more and more powerful in the last years. 
One reason is that a proof of termination no longer is just some reduction order which contains the rewrite 
relation of the TRS. Currently, most provers combine basic termination techniques in a flexible way using 
the dependency pair framework (DP framework) or rule removal. Hence, a termination proof is a tree 
where at each node a specific technique is applied. Therefore, instead of just stating the precedence 
of some lexicographic path order or giving some polynomial interpretation, current termination provers 
return proof trees consisting of many different techniques and reaching sizes of several megabytes. Thus, 
it would be too much work to check by hand whether these trees really form a valid proof. (Also, 
checking by hand does not provide a very high degree of confidence.) 

It is regularly demonstrated that we cannot blindly trust in the output of termination provers. Every 
now and then, some termination prover delivers a faulty proof. Most often, this is only detected if 
there is another prover giving a contradicting answer on the same problem. To improve this situation, 
three systems have been developed over the last few years: CiME/Coccinelle [5,6], Rainbow/CoLoR 
[4], and CelA/lsaFoR [16]. These systems either certify or reject a given termination proof. Here, 
Coccinelle and CoLoR are libraries on rewriting for Coq (http : //coq. inria.fr) and IsaFoR is our 
library on rewriting for Isabelle [15]. (Throughout this paper we just write Isabelle whenever we refer 
to Isabelle/HOL.) And indeed, using certifiers several bugs have been detected. For example, in the 
1 termination competition of the last year (November 2009), at least eight faulty proofs were spotted by 

certifiers. 1 (Caused by three different bugs, all of which were most likely due to some output error.) 

Although many termination techniques have already been formalized — CelA can certify termination 
or nontermination proofs for 1522 out of the 2132 TRSs from the TPDB version 7.0.2 which is over 70 % 
of the whole database — there are still several techniques that have not been formalized. So, clearly there 
are termination proofs that are produced by some termination tool where the certifiers have to become 
more powerful. 

However, a similar situation also occurs in the other direction. We have formalized termination 
techniques in a more general setting as they have been introduced. Hence, currently we can certify 
proofs using techniques that no termination tool supports so far. In this paper we shortly present two of 
j3 ■ these formalizations. 

(a) Polynomial orders with negative constants [12]. 

(b) Arctic termination [13]. 

Here, for (a) we were able to lift the result from the naturals as introduced in [12] to an arbitrary car- 
rier, including matrices (Sec. 3). For (b) we have generalized the arctic semiring and the arctic semiring 
below zero into one semiring which subsumes both existing approaches and extends them to the rationals 
(Sec. 4). 

Note that all the proofs that are presented (or omitted) in the following, have been formalized in our 
Isabelle library IsaFoR. This library and the executable certifier CelA are available at CelA's website: 
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2 Preliminaries 

We assume familiarity with term rewriting [2]. Still, we recall the most important notions that are used 
later on. A term t over a set of variables V and a set of function symbols T is either a variable x € V or 
an rc-ary function symbol / G F applied to n argument terms f(t\ ,...,?„). 

A rewrite rule is a pair of terms t 1 — >■ r and a TRS 1Z is a set of rewrite rules. The rewrite relation 
(induced by 1Z) — >n is the closure under substitutions and under contexts of 1Z, i.e., s — ^ t iff there is a 
context C, a rewrite rule £—±rETZ, and a substitution a such that s = C[ia] and t = C[ro]. A TRS 1Z is 
terminating, written SN (1Z), if there is no infinite derivation t\ ?2 — >tz h -^iz 

3 Polynomial Orders with Negative Constants 

Polynomial orders [14] are a well-known technique to prove termination. They are an instance of the 
termination technique of well-founded monotone algebras. Such algebras can be used for all termination 
techniques that rely on reduction pairs [1]. Here, a reduction pair consists of two partial orders >-) 
where ^ and y are stable, £3 is reflexive and monotone, >- is well-founded, and ^ is compatible to y, 
i.e., ^ o y C y. If additionally y is monotone, then we call Q^, y ) a monotone reduction pair. 

It is well-known that reduction pairs can be used for proving termination of TRSs within the DP 
framework [1, 10, 11]. Moreover, monotone reduction pairs can be used for direct termination proofs or 
rule removal [3,9, 14]. 

To formalize polynomial orders, we first assume some semiring over which the polynomials are built. 

Definition 1. A structure (W,©, 0,0,1) with universe U, two binary operation © and on U, and with 
0,1 is a semiring with one-element iff 

• © and are associative and © is commutative 

• 7^ lj and 1 are neutral elements w.r.t. © and 0, respectively, and O_0x = ;c0O = O 

• distributes over ©:x0(y©z)=x0y©x0z and (x©y)0z = x0z©y0z 

To obtain polynomial orders, we assume a strict and a non-strict order. Moreover, we demand the 
existence of a unary predicate mono where mono(x) indicates that multiplication with x is monotone 
w.r.t. the strict order. 

Definition 2. A structure (U, ©, 0, 0,1, >,>, mono) is an ordered semiring iff (U, ©, 0,0,1) is a semir- 
ing with one-element and additionally: 

• > is reflexive and transitive; > and > are compatible: > o > C > and > o > C > 

• 1 > and mono(l) 

• © is left-monotone w.r.t. >: if x > y then x © z > y © Z 

• © is left-monotone w.r.t. >: if x > y then x © z, > y © z 

• is left-monotone w.r.t. >: ifx > y and z > then x z > y z; is right-monotone w.r.t. > 

• is right-monotone w.r.t. >: if mono(x), x > 0, andy > z thenxQy > xQz 

• {(x,y) I x > y Ay > 0} is well-founded 

Note that using the approach of well-founded monotone algebras, every interpretation of the function 
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symbols over some ordered semiring gives rise to a strict (V) and a non-strict (£) order on terms. For 
example, for a polynomial interpretation Vol we define s >~poi t iff [s] > [t], and s )ZVui t iff [s] > [/] 
where [s] is the homeomorphic extension of Vol to terms. 

Theorem 3. Let Vol be a polynomial interpretation over an ordered semiring (U,(B, 0,0,1, >, >, mono) 
where [f](xi,. . . ,x„) = /o ffi/i 0*i ©■•■©/„ 0i„ a«<i /; > 0/or all <i <n and every n-ary symbol 
f. Then Qz-poh^Vol) is a reduction pair. If moreover, mono(fi) for all 1 <i <n then (^Voh>~Voi) is a 
monotone reduction pair. 

Example 4 (Ordered Semirings). (N,+, -,0, 1, >, >, > 1), (Z,+, -,0, 1, >, >,> 1), and (Q,+, -,0, 1,>, 
>8, > 1) ore ordered semirings. In the last case, we assume a fixed rational number 8 with < 8, and 
where >§ is defined by x>§y iff x — y> 8. 

To formalize matrix-interpretations [8], we followed the approach of [7] and used a domain with 
an additional strict-dimension and where the elements are matrices — instead of vectors as in [8]. In 
detail, we have proven that if < sd < n and (U, ©,©, 0,1, >,>, mono) is an ordered semiring, then 
(U nXn ,® nxn ,Q nxn ;0 nxn ,l nxn ,> nXn ,> n J n ,mono^ n ) is also an ordered semiring where all operations 
and constants are lifted to work on ^-dimensional matrices, with the strict-dimension sd. Here, > nxn 
compares the arguments component-wise, and M > n s v d n M' iff M > nxn M' and at least one entry in the 
upper-left sd x s<i-submatrix is strictly decreasing w.r.t. >. Moreover, mono'^" demands that for every 
column in the upper-left sd x sJ-submatrix there is at least one monotone entry. 

As observed in [7], choosing sd = 1, is comparable to the classic definition of matrix-interpretations. 
Choosing sd = n, is always best if one does not require monotonic reduction pairs. However, to ensure 
monotonicity also a small value of sd might be attractive. 

To lift the requirement in Thm. 3 that all /, have to be at least 0, in [12], polynomial orders with 
negative constants have been introduced. There, the constant part can be arbitrary but the interpretation 
of a function is always wrapped into a max(0, •) operation to ensure well-foundedness. This complicates 
the comparison of terms, as the resulting interpretations are not pure polynomials anymore, but also 
contain the max-operator. To this end, approximations \-\uft and [-\right have been introduced which 
interpret terms by polynomials without max, such that [s]i e ft < [s] < [s] r i g ht- 

However, the existing approximations are unsound if generalized naively. For example, in the case 
where the constant part is negative, it is removed. This works fine for the integers and the rationals, but 
not for matrices, as here some parts of the matrix may be negative, but other parts can also be positive 
and thus, cannot be removed. Thus, we formalized the following approximations which are equivalent 
to those of [12], but also work for matrices: 

Definition 5. Let cp(-) be the constant part and ncp(-) be the non-constant part of a polynomial. 



[f{t { t„)]right = ncp(p ri g fe ) © max(0, cp(p right )) 

where pi eft = [f]([h}i e ft, [t n ]left) and p right = \f]{[h] r i g ht, [tnjright) 

Note that for Def. 5 we have to extend ordered semirings by the additional unary operation: max(0, •). 

Definition 6. A structure (U, ©,©, 0,1, >, >, mono, maxO) is an ordered semiring with max iffiti, ©, 0, 
0,1, >, >, mono) is an ordered semiring and additionally: 

• maxO(^) > and max0(x) > x 

• y > x > implies max0(j) > max0(x) = x 



[x]left = [x]right 



X 





otherwise 



3 



Theorem 7. Let (U, ffi, 0,0,1, >, >, mono, maxO) be an ordered semiring with max and Vol be a poly- 
nomial interpretation where [f] {x\ , . . . , x„ ) = fo © f\ x\ © • • ■ © /„ x n and f > Ofor all \ <i <n and 
every n-ary symbol f. Then (jZvoU^Vol) is a reduction pair where s y / can be approximated by 

[s]left > I > [t]right- 

Example 8. All ordered semirings of Ex. 4 are also ordered semirings with max, where maxO is the 
standard operation on N, TL, and Q, and maxO is performed component-wise for matrices. 
For example, for Q it is now possible to use interpretations like 

[half] (*) = -•*+- [p](x)=x-l [s](x)=x+l 

where ^ ^ 

[s(x)]i e jt = x+ 1 > - -x + - = [p(half(s(s(x))))] rig fa 

Since we are not aware of any termination tool that supports these interpretation, we would like to 
encourage their integration, perhaps an interpretation like 

[f]fcy) = ( \ o )•*+>+( 

increases the power in the next competition. 



4 Arctic Semirings 

In [13], the arctic semiring as well as the arctic semiring below zero, where used the first time in the 
well-founded monotone algebra setting. 

Example 9 (Arctic Semirings). The arctic semiring (A^, max, +, — °°,0), the arctic semiring below 
zero (Az, max, +, — °°,0), and the arctic rational semiring (Aq, max, +, —00,0), are semirings with one- 
element as in Def. 1. The carriers are given by A5 = SU {— °°}- Furthermore, the standard operations 
max and + are extended such that max{x, —00} = % andx-\ — 00 = — 00 -\-y = —00, for all x andy. 

Definition 10. A structure (U, ©,0, 0, 1, >, >, pos) is an ordered arctic semiring iff (Z^,©,0,0, 1) is a 
semiring with one-element and additionally: 

• > is reflexive and transitive; > and > are compatible: > o > C > and > o > C > 

• 1 > 0; pos(l); x > 0; x > 0; and ifO > x then x = 

• © is left-monotone w.r.t. > 

• © is monotone w.r.t. >: ifx>y and x' > y' then x © x' > y © y' 

• is left- and right-monotone w.r.t. > and left-monotone w.r.t. > 

• staying positive: if pos(x) and pos(y) then pos(^:©z) and pos(x0 y) 

• {(x,y) I x > y A pos(j)} is well-founded 

Theorem 11. Let Vol be a polynomial interpretation over an ordered arctic semiring (^,©,0,0, 1, >, 
>, pos) where [f]{x\ , . . . ,x n ) =/o©/i0-ci® ,,, ®/»0-tn and pos(f) for some < i < n and every 
n-ary symbol f. Then (jZvouyvol) is a reduction pair where s ^ / >- 1 is approximated by comparing 
[s] and [t] component-wise using > / >. ( For example to compare aQx@bQy®c>dQx@eQy@f 
one demands a > d, b > e, and of.) 
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Moreover, if n > and (U, ©,©,0,1, >,>,pos) is an ordered arctic semiring, then (U nxn , ffi* xn , 
Qnxn Qnxn ^«x« >nx« ^nxw p OS «x«-j j s a i SQ an orc jered arctic semiring where all operations and con- 
stants are lifted to work on ^-dimensional matrices. Here > nxn and >" x ", compare arguments component- 
wise and pos nxn checks, whether the leftmost topmost element is pos. 

Example 12 (Ordered Arctic Semirings). All arctic semirings of Ex. 9 are also ordered arctic semirings. 
In all three cases, we use the non-strict ordering x > y = y = — oo V (x 7^ —00 Ax >n/z/q )>)■ For A^ 
and Ag, we use the strict ordering x > y = y = —00 V (x 7^ —00 Ax >^/j J y), and for Aq, we use the 
strict ordering x >g y =y = — «V(i^ — °° Ax—y >q 8) for some 8 > 0. Furthermore, the check for 
positiveness is defined by pos(x) ej^ — 00 Ax >n/z/q> 0. 

Note that the ordered arctic semiring over Aq, together with Thm. 11, unifies and extends Theo- 
rems 12 and 14 of [13]. Here, the main advantage of our approach is that we only restrict interpretations 
[f]{x\ ,x„) = fo ffi/i Qxi ©•••©/„ 0x„ by demanding that at least one f is positive. This is in con- 
trast to the theorem about the arctic semiring below zero in [13] where always the constant part fo has 
to be positive. However, Waldmann observed that for finite TRSs one can transform every polynomial 
order over the arctic rationals into an order over the arctic naturals by multiplication and shifting. 
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